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Figure 1 - Computer Object & Associated Attributes 
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Figure 4 - Dynamic Update Algorithm 



3/3 



iNS0OClD:<WO 961 8947*1 > 



INTERNATIONAL SEARCH REPORT 



tn«tiTuoo»u' TticAqan No 

PCT/US 95/15959 



A CLASSIFICATION OF SUBJECT MATTER 

IPC 6 G06F9/44 



AccDfAnc to [n(em*oorul Pttcm Quaficatton (IPQ or to boch ruaorui dAagcAaon and IPC 



B. FIELDS SEARCHED 



Miamtan documotuaon tcarcAcd (tiimficaaoa lyttm foUow^ by daaficaaon tvmtnts) 

IPC 6 G06F 



Doa«KRUtton ki/M otfi<r i»un mimmum documcRUoon to :iu emc aut cucii doctmno an indiukd in the fields scaroot 



Eloarome dau base conaituil dunng <tic imcnuoonal aaanH (luffl* of dau ten and. wtov prtcttUT^^ 



C. DOCUMghTTS CONSIDERED TO BE R£L£VaNT 



Ca«f«y 



Gtaaon of document, wtt tnttcaaor. -here afjproipnaiB. of Ote relevant paoaccs 



PROCEEDINGS OF THE INTERNATIONAL SYMPOSIUM 
ON FAULT TOLERANT COMPUT (FTCS), TOULOUSE 
JUNE 22-24, 1993, 

no. SYMP. 23, 22 June 1993, INSTITUTE OF 
ELECTRICAL AND ELECTRONICS ENGINEERS, 
pages 30-35, XPGQ0437223 
DEEPAK GUPTA ET AL: "INCREASING SYSTEM 
AVAILABILITY THROUGH ON-LINE SOFTWARE 
VERSION CHANGE" 
see abstract 

left-hand colunr. 



see page 30, 
line 19 
see page 31, 
line 10 
see page 33, 

right-hand column, line 33 



line 1 



left-hand column, line 2 - 
left-hand colurm, line 1 - 



7- 



Rckvaftt CO dan No. 



1-16 



I X| ^^'^^ docuaoa an Iiaud m «c 
' SpcoAl eaaeconcs of ottd (kmwMm : 



oondautf on of box C. 



t fanaJy 



'A' 



^ tM cocral ttau of the 
c°n«<*"til to be of pw«cular rricvmee 



vndi IS not 



laser documnt puMt^Md ate tlkc nimuftonal nUaf data 
or ^wnty dau and not a omflKt wim tbe appiicaaon but 
atfld ID wademaad the pnaaple or tevy tndcf1yitt« qm 



fiUnf data 



t bui piiWi#»d on or aAcr . 



may tlww doute on pnor.r. Ia^s) or 
wt«cb ts otad 10 cwMiata tfia puMicam fu*.- -k anote 
ataaon or ate tpcoal ream (as ip«afic4: 

'O' docianeM nfonac to an oral dtM^ew, Me. oriteaan or 
ma 

pAUkadpnor to the iMaraaaoaal (ujt^ dak but 



X doc-nat of pafvaiar rctrraace; tfie datme4 invcitton 
caiM be coMdcwd aovd or cuaol be eaim^axA e 
at*oim an ui^«iavi *tai dke ■^wni u taka alone 

'Y* docwol of pancUar t««vaoee; tfM dMiBcd umnaon 
came be owt tunl to mvot^p* an umaaipv cb^ wtiea tfM 
d oo «iam a eocnfiined with om or more other n«dk doo*- 
moA au^ co nWn a ncia betac otowtous to a penon ibUcd 
in dte aft. 



Data of the mouU eamplctwn of the inmaaooal aLtrcA 

8 Hay 1996 


Data of maiiins of (he tmemaaonal search Rpon 

22.05.96 


Name and maiUnc $a^m» of the SA 

Etnpaut Pafirm OfTioa. P.6. Hit Patandaan 2 
NX • 22S0 HV Rj9«i* 
Td.(*3l.T0) 140.2040, Tx. 31 651 cpo nl. 
Fac(* 31 70) )40-Xl« 


AuOionicd ofTicv 

Michel, T 



page 1 of ^ 



WSOOCIO* <WO 9«19*47At> 



C^Conomuoon) 



INTERNATIONAL SEARCH REPORT 

'docijments considered to 86 relevant" 



IntcmAOorui 4ic*aoo So 

PCT/US 95/15959 



CAtffory 



Ouooo of documcTU. with oulictQon. *h<r, tppr^qnau, of 0- rtlev«i pimfa 

DATA COMMUNICATIONS INTERNATIONAL. OCT. 
1009 IJ5A 

vol 21. no. 13. ISSN 0363-6399 

pages 53-56. 58, 60. XP0GG569105 

RUIZ B ET AL: "Netware 4.0: a directory 

to the enterpri se" 

see page 56. middle colunr, line 3 - page 
58. left-hand column, line 34 
see page 58, right-hand column, line Zi - 
page 60, middle colunr, line 19 

US. A, 5 155 847 (KIROUAC DONALD L ET AL) 
13* October 1992 
see abstract 

see column 1, line 54 - colunr 3. line 4; 
figure 1 

US, A. 5 359 730 (MARROM ASSAF) 25 October 
1994* 

see abstract . « o 

see colunr 2, line 53 - colunr 4, line 2 

WO. A. 94 01819 (ERICSSON TELEFON AB L H) 20 
January 1994 
see the whole document 

EP,A,0 426 911 (HEWLETT PACKARD CO) 15 May 
1991* 

see the whole document 



iUlcvani to dum So. 



1-16 



1-16 



1-16 



1-16 



1-16 



Form rCTIlAOH 

1NSOOC10:<WO 9«t8^7Al> 



MO (itrtr iwj) 



page 2 of 2 



INTERNATIONAL SEARCH REPORT 

tflrarm_on an paoent fAjiuly nw rab q- i 



[2cemAoarui licaaon No 

PCT/US 95/15959 



Puent document 


Publicmuon 


Puent family 


Publiciuon 


CTted in search repori 


due 


m«mbef(s) 


due 




13-10-92 


CA-A- 


1310131 


10-11-92 


US-A-5359730 


25-10-94 


NONE 






WO-A-9401819 


20-01-94 


US-A- 


5410703 


25-04-95 






AU-B- 


667559 


28-03-96 






AU-B- 


4516493 


31-01-94 






EP-A- 


0648353 


19-04-95 






FI-A- 


946195 


30-12-94 






MO-A- 


945096 


22-02-95 



EP-A-0426911 15-05-91 NONE 



Fww ^CT/UA/211 {tmm% Omdy mmx) U^Jy 1993) 

NSCCC10-<WO 961894741> 



wo 96/18947 PCT/USM/13959 

Method & Apparatus To Update or 
Change A Network Directory 

5 Background 

The present invention relates to the management of distributed digital network directories, 
and particularly to providing dynamic updates to the computer programs supporting distributed 
directory services. 

10 Technological advances in miCToelectronics and digital computing systems have resulted in 

the proliferation of digital computer networks, enabling the distribution of networking services 
across a wide range of computers participating in the network and over various communications 
media. Advances in distributing applications have also resulted in a client-server architecture for 
- applications. Under the architecmre, the portions of the application that interaa with the user are 

1 5 typically separated from the portions of the application that fulfill client processing requests. 

TypicaUy, the portions of an appUcation that interaa with the user are called a client applications 
or cUent software, whereas the portions of the appUcation that service requests made by the client 
applications are called a server applications or server software. In a networic environment, the 
client applications and server applications are generally executed on different computers. 

20 Historically, di©tai networks in the form of local area networks, a physical collection of 

personal computers interconnected with network cabling and network interface cards, comprised 
a single network server and multiple network cUents. To manage which network cUents could 
access the network server, as well as what files, printers, printer queues, and server applications 
were available to the network clients, the network server maintained information on each of the 

25 resources that were attached to the server, the identities of the network cUenis and users who 

could use the services of the network server, and the scope and nanire of the services available to 
the network clients and users. 

As local area networks became more popular, networks grew in size requiring several 
servers to service the needs of users. With increased size and complexity of networks, came the 
30 need for easier management of network servers. Users required access to an increasing number 
of services that were located on an inaeasing number of network servers. Several vendors began 
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offering ncrworkijig servers. Each vendor implemented a different scheme of providing 
networking services information. In addition, because of the way the server maintained 
information about only its networking seiviccs. each network server still required management of 
its resources independent of other network servers. 

This insular method of maintaining information of networking services fueled research and 
development of distributed networking directories that span networking servers. Thus far. 
research has resulted in several potential solutions. Three technologies currently hold greater 
promise for replacing the large number of insular, idiosyncratic directories that now litter many an 
enterprise's numerous local-area networks and electronic-mail systems. One of the more popular 
approaches exploits the X.500 distributed network information directory services protocol 
developed as published by the CCIT and Open Systems Interconnect consortium. 



However, while the X.500 protocol appears to hold the greatest promise to provide a 
robust, distributed directory, the X.500 protocol has been slow to gain acceptance. The X.500 
protocol has been plagued from the stan with management, interoperability and security 
15 problems. The X.500 protocol specification describes a technical framework, interoperability 
requirements and compliance criteria but docs not describe specific implementations. Thus many 
of the details of implementation have been left up to systems providers. 



The X.500 protocol specification describes a distributed directory. The directory provides 
information services to network clients. The information in the directory can be read as well as 
20 modified by users who have applicable access rights. 



The information stored in the directory is stored in the form of a schema, a collection of 
objects with associated attributes or properties tied together by their relationship to each other 
Figure 1 shows an object called "Computer" with a few associated attributes, such as owner, 
operator, suius, etc. The values of the properties are not shown in the figure but an example of a 
25 value for "Owner'* might be "Fred." Objects in the du-eciory and their names correspond to 

things that humans relate to when dealing with computers, namely, users, printers, print queues, 
networks and information. Objects such as countries, organizations, networks, people and 
computers arc objects you might find in the directory as well. 



1 
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The directory provides information to users by giving users a hierarchical view of all of the 
information contained in the directory. The hierarchical view is generally in the form of a tree. 
Figure 2 shows a directory. Each of the branches and terminating points or leaves represent 
objects in the directory. Generally, implementations of the directory organize objects in subtrees, 
5 pardtions or domains. Figure 2 also shows the directory organized into partitions or domains. 
Multiple copies of each partition may be stored in the directory. Software schemas define and 
determine the number and types of replicas of each partition. 

Multiple replicas of a partition are needed to reduce network storage and traffic 
requirements and speed up directory searches. Replicas are stored in name servers. A name 
10 server is a computer in the network, usuaUy a network server. More than one partition can be 
stored in a name server. Partitions stored in a name server need not be contiguous. 

The directory tree provides a logical means of searching for information. The tree is 
generally patterned after logical groupings such as organizations, organizational units, computers 
and users. These logical groupings, while extremely useful in helping users find relevant 
1 5 information also creates significant problems in managing the directory. 

Each partition forms a major subtree of the directory. Taken together, the partitions form 
a hierarchical tree of partitions that leads back to a root partition containing the root directory. 
Where boundaries of two partitions meet, the partition closer to the root is considered superior, 
and the partition farther from the root is considered subordinate. Thus, Figure 2, partitions E and 
20 C are subordinate to the other partitions. 

The present invention solves one of the problems associated with a distributed directory. 
As distributed directories beconw more popular, more and more users will rely on them for access 
to data and services. As user rely on directories more heavUy, the time in service of the directory 
will be critical. Users will not tolerate even a temporary shut down of the directory or a ponion 
25 of the directory. 
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Summary of the Invention 

With the present invention the computer programs that provide the services associated 
with a distributed directory can be dynamically updated without a significant interruption in 
services. Time in service of the directory will thus increase, increasing user confidence in the 
directory. 

Brief Description of the Drawings 

The present invention nnay be more fully understood by reference to the following 
[>ctailed E>escTipaon in conjunction with the Drawings, in which: 

Figure 1 shows a typical directory object, a computer, with some of its associated 
attributes; 

Figure 2 shows a typical directory tree; 

Figure 3 shows the network protocol environment in which the present embodiment of the 
invention is implemented; and 

Figure 4 shows the software algorithm employed by the invention to dynamically update a 
directory services module without interruption of services. 

Detailed Description of the Invention 

The present embodiment of the invention. Novell's NetWare Directory Service or NDS. 
supports dynamically updating the computer programs that provide distributed digital directorics. 
NDS operates in the NetWare network operating system environment. 

The invention is enabled through a NetWare Core Protocol verb. NDS design builds on 
several previously implemented capabilities of NetWare, including the NetWare Core Protocol 
C'NCP'*). The first capability relevant to the invention is NetWare's native network layer 
protocol, IPX. IPX provides end-to-end datagram delivery over network media and over 
internetworks. 

NDS allows multiple independent name trees to coexist in the same internetwork without 
interfering with each other. A rendezvous feature is defined allowing a client interested in a name 
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tree to locate >fDS name servers. The rendezvous feature builds on another previously 
implemented capability of NetWare: SAP (Service Advertising Protocol). Routers in all installed 
NetWare internetworks convey SAP information for client/server rendezvous. With NDS. SAP 
has a narrowly confined role: a client uses it to find its first NDS name server. 

5 The NCP sits above the network layer. Sec Figure 3. NCP supports many networking 

services, such as file services. Certain operations on an NCP connection arc specific to NDS. 
Once an NCP connection exists, it can also convey NDS requests and replies. Because NDS uses 
messages that can be quite large, it employs a fragmentation protocol to convey an NDS message 
in (possibly) several NCP packets. 

10 Each NCP packet begins with a small message header that carries general status 

information about the current state of the connection between the client and the server. The client 
request header is seven bytes long, while a server's reply header is eight bytes long. As shown 
below, the RequestType variable defines the type of network request. A type of Ox 1 1 1 1 is 
reserved for connection allocation services; a type of 0x2222 is reserved foi; server request 

1 5 services; a type of 0x3333 is reserved for server responses; a type of 0x5555 is reserved for 
destroying connections; and a type of 0x9999 is reserved for work in progress responses. 

Reload Verb 
0x2222 104 8 

20 Request Format , 



Offset 


Content 




Type 


0 


RequestType 


(0x2222) 


WORD 


2 


SequenceNumber 


(LastSeq+1) 


BYTE 


3 


ConnectionHigh 


(ServiceConn) 


BYTE 


4 


TaskNumber 


(CurrentTaskNum) 


BYTE 


5 


ConnectionLow 


(ServiceConn) 


BYTE 


6 


FunctionCode 


(104) 


BYTE 


7 


SubFuncCode 


(08) 


BYTE 



5 
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Reply Format 



Offset 


Content 




Type 


0 


Reply Type 


(0x3333) 


WORD 


2 


SequenceNumber 


(LastSeq+1) 


BYTE 


3 


ConnectionLow 


(ServiceConn) 


BYTE 


4 


TaskNumber 


(CurremTaskNum) 


BYTE 


5 


CoonectiooHigh 


(ServiceConn) 


BYTE 


ft 


CompleiionCode 


(Ccode) 


BYTE 


7 


Connections tanis 


(StatusFlag) 


BYTE 


8 


NDSErrorCode 


(NDSError) 


4 BYTES 


12 


Reserved 




4 BYTES 



The sequence number maintains a numeric counter for all incoming requests to provide 
reply prioritization. The ConnectionLow and the ConnectionHigh numbers identify a particular 
service connection between the client and the server. The TaskNumber distinguishes which 
client process or thread is making the request to the server. 

* The present embodiment of the invention uses the Reload Directory Services NCP. The 
Reload Directory Services NCP allows the principal computer program that provides directory- 
services in the NetWare envirorunent, DS.NLM. to be replaced on disk and reloaded in a server 
while that server is active and while other computer programs, NetWare Loadable Modules or 
NLMs in the NetWare environment, of the server are actively referencing NDS entry points. 

Three NLMs are involved. The DSLOADER.NLM contains the directory entry points to 
which all other NLMs actually link, including the current DS.NLM in memory and a new 
DS.NLM on disk which is to replace the current DS.NLM. 

Referring to Figure 4 and the code segments provided in Tables — the dynamic update 
aspect of the invention is performed by two threads of execution within the NetWare operating 
system. The first thread (A) is the thread that begins servicing the NCP request, the other thread 
(B) is started by thread (A) to complete the reload of the new DS.NLM. The replacement 
algorithm is as follows: 

1 . Thread (A) receives the RELOAD NLM NCP request in a function that is part of the 
currently loaded DS.NLM. 



6 

SUBSTTTLITE SHEET (RULE 25) 



wo 96/18947 



PCr/US95/ 15959 



2. Thread (A) checks the client authorization. 

3. If the client has proper authorization, usually the highest level of security clearance 
5 allowed by the system, thread (A) calls the OSLO ADER and requests a reload. 

4. Thread (A) renames the memory image of the currendy loaded DS.NLM to 
DSOLD.NLM. 

10 5. Thread (A) starts thread (B) and then waits until thread (B) reports whether or not the 
load was successful. 

6. Thread (B) calls the operating system to load the new DS.^fLM. This loads the new 
DS.NLM and then calls DS.NLM's iniualizadon function. 

15 

7. While initializing the new DS.NLM, thread (B) reports the new DS.NLM version number 
to DSLOADER and retrieves from DSLOADER the DSOLD.NLM version number. The 
DSLOADER may reject the load with an error response or it may return the new 
DS.NLM version number. 

8. Thread (B) will abort the load on an error from the loader, or if the new DS.NLM rejects 
the version number returned by DSLOADER. Thread (B) will indicate to thread (A) if it 
aborts or commit to continue the load. 

25 9. Thread (A) detects the abort or conimit state transition from thread B. If the load is 
aborted thread (A) renames the DSOLD.NLM back to DS.NLM in memory. It then 
returns from the loader. 



20 



30 



10. The DSOLD.NLM replies to the NCP request. 

11. If Thread (B) commits to continue the load it waits for thread (A) to complete the 
response to the NCP, then it will unload DSOLD.NLM and continue with the initialization 
of the new DS.NLM. 

35 12. Thread B terminates itself. 
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10 



15 



20 



Table 1 - Code Segments Implcmentine Steps 1-3 and 10 

int ReioadDSdn- conn) 
{ 

inc err = 0, managesEncry ; 
THREADDATA td; 

/• 1. begin servicing reload NC? •/ 

if (err = DSAClientSCart (TD_CHECK_OPEN, conn. -1, -1, &cd) ) 
return err; 

/* 2. check client authorization •/ 
if { IsSupervisor I conn) 

II !(err = GlobalChecJcManagement ( Server ID () . ID_S£Lf, 

Stinanages Entry , 0)1 

Sc& managesEntry ) 
err = DSLReload (DSModuleHandle ( ) ) ; /• 3. call loader •/ 
else if { ! err) 

err = ERR_NO.ACCESS ; 

/• 10. reply to the NCP •/ 
return DSAClientEnd ( err ) ; 
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10 



15 



20 



25 



30 



35 



40 



45 



Tabic 2 - Code Segments Implementing Steps 4-5 and 9 

int DSLReload{uint32 moduleHandle) 

( 

/• 4. rename DS.NLM Co DSOLD.NLM •/ 

struct LoadDef iniCionStructure *mh = (struct LoadDef ini tionStructu: 
• ) modu 1 eHandi e ; 

char savedName (sizeof (mh->LDFileNaine) ] ; 
if (!mh) 

mh = {struct LoadDef initionStructure ♦ ) registeredModule ; 
else if (moduleHandle 1= registeredModule) 
return ERR_INVALID_REQUEST; 

if (dslState != DSL.IDLE) 

return ERR^DS^LOADER.BUSY ; 
dslState = DSL.ACTIVE; 
if (mh) 



( 



/* actual rename happens here ♦/ 

CMovB (mh->LDFileName, savedName, sizeof ( savedName) ) ; 
CMovB(dyingNLMName, mh->LDFileName, sizeof (savedName) ) : 



/* 5. start new thread and wait for state change */ 
aesReload.AWaJceUpDelay Amount s 0; 
aesReioad.AProcessToCall = ReloadWorker ; 
aesReload. ARTag = aesTag; 

ScheduleSleepAESProcessEvent (fiiaesReload) ; 
while (dslState == DSL.ACTIVE) 
CYieldWithDelay ( ) ; 



/* 9, detect state and rename DSOLD.NLM back to DS.NLM if abort */ 
if (dslState as DSL.ABORTED) 



if (mh)' 
( 

CMovB (savedName, mh->LDFileName, sizeof ( savedName ) i ; 
/• mh->LDFlags i= oldDoncUnioadBi t ; */ 

} 

dslState = DSL.IDLE; 
return loadError; 

} 

if (dslState == DSL. PROCEEDING) 
dslState = DSL.COMMITTED; 
return 0; 
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Table 3 - Code Fragments Implementing Step 6 and part of 8 



void ReloadWorker (void) 



( 



unsigned long oldModule = regisceredModule ; 
if (dslStace != DSL_ACTIVE) 
return; 

/* 6. call lead function ♦/ 
if {loadError = LoadDSNLMO) 

{ 

/* 8. indicate the abort state change ♦/ 
if (dslState DSL^ACTIVE) 

dslState • DSL_AflORTED; 

} 

else if (dslState -» DSL CORPSE) 

{ 

if (oldModule) 



{ 



DelayMyself (18, timerTag) ; 
KillMe (OldModule) ; 



dslScace • DSL IDLE; 



25 



Table 4 - Code Fragments Implementing Step 7 anci the Remainder of Step 8 



30. 



35 



40 



45 



50 



inc RegiscerWichDSLoader (void) 
{ 



int err; 

uint32 dslVersion, loadedDSVersion; 
int i ; 



'I 



/♦ 7, negotiate versions with loader. Handle loader's rejection ♦/ 
if (err = DSLNegotiateVersions (DSVersion () » idslVersion, 
&loadedDSVersion) ) 

return err; 

if ( !ACCEPTA3L£_DSL0ADER_VZRSI0N(dslVersion) ) 

return ERR_INVALID_DS J/ERSION; /♦ reject the loader */ 

/♦ 8, commit to load new KLM. this changes loader state ♦/ 
if (err - DSLRegister (DSModuleHandle 0 , DSVersionO, &ddsFuncs, 
&emuFuncs , 

DSCanUnload, DSUnioad, &dslMemTag, dslCormandLine) ) 
return err; 

/♦ continue ^^LM initialisations ♦/ 
/*...*/ 

return 0 ; 



10 

SUBSTTTUTE SHEET (RULE 26) 

JNSCOCIO- -eWO ?«1994741» 



wo 96/18947 



PCT/US95/15959 



Tabic 5 - Code Fragments Implementing DSLoader Response to Step 7 
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int DSLNegotiateVersions (uint32 dsVersion, uint32 ♦dslVersion, 
uint32 •registeredDSVersion) 



( 



•dslVersion = INTERNAL.VERSION; 
•registeredDSVersion = registeredVersion; 
dsVersion = dsVersion; 

recurn ACCEPTABLE.DS.VERSION (dsVersion) ? 0: ERR_INVALID_DS„VERSION ; 
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As indicated by the above method, the computer progranu providing services to a 
distributed directory can be dynamically updated without interruption of directory services. Thus, 
critical directory related services can be updated and new service enhancements can be added 
without interruption. 



Although one embodiment of the invention has been illustrated and described^ various 
modifications and changes may be made by those skilled in the art without departing from the 
spirit and scope of the invention. 
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Claims 

1. A method, in a computer network, of dynamically updating an old computer module with 
a new computer, comprising the steps of: 

a. receiving a request to update an old computer module; 

b. calling a loader computer module, which routes requests from the old computer 
module, having the basic functionality of the old computer module; 

c. loading a new computer module to replace the old computer module; and 

d. making active the new computer module and making inactive the old computer 
module. 

2. A method as recited in claim K whereby the new computer module is a more current 
version of the old computer module. 

3. A method as recited in claim 1, further comprising the step of: checking that the request to 
update has valid authorization prior to calling the loader computer module. 

4. A method as recited in claim 1, further comprising the step of: checking that the new 
computer module is compatible with the old computer module prior to unloading the old 
computer module. 

5. A method as recited Ln claim 1 . whereby the old and new computer modules are NetWare 
loadable modules. 

6. A method as recited in claim 1, whereby the old and new computer modules provide 
directory services. 

7. A method, in a computer network, of dynamically updating an old computer module with 
a new computer module, comprising the steps of: 

a. receiving a request to update an old computer module; 

b. calling a loader computer module, which routes requests from the old computer 
module, having the basic functionality of the old computer module; 

c. loading a new computer module to replace the old computer module; 



wo 96/18947 PCT/US95yi5959 

d. checking that the new computer module is compatible with the old computer 
module; and 

e. making active the new computer module and making inactive the old computer 

5 module if the new computer module is compatible with the old computer module. 

8. A method as recited in claim 7, whereby the new computer module is a more current 
version of the old computer module. 

10 9. A method as recited in claim 7, further comprising the step of: checking that the request to 
update has valid authorization prior to calling the loader computer module. 

10. A method as recited in claim 7. whereby the old and new computer modules arc NetWare 
loadable modules. 

15 

11. A method as recited in claim 7. whereby the old and new computer modules provide 
directory services. 

12. A method of dynamically updating an old computer module being used on a seiner in a 
20 client/server network with a new computer module, comprising the steps of: 

a. receiving! a request to update an old computer module; 

b. calling aJpader computer module, which routes requests from the old computer 
module, having the basic functionality of the old computer module: 

c. loading a new computer module to replace the old computer module; 

25 d. checking that the new computer module is compatible with the old computer 

module; and 

e. making active the new computer module and making inactive the old computer 

module if the new computer module is compatible with the old computer module. 

30 13. A method as recited in claim 12, whereby the new computer module is a more current 
version of the old computer module. 
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14. A method as recited in claim 12. funher comprising the step of: checking chat the request 
to update has valid authorization prior to calling the loader computer module. 

15. A method as recited in claim 12, whereby the old and new computer modules arc 
5 NetWare loadable modules. 

16. A method as recited in claim 12, whereby the old and new computer modules provide 
directory services. 
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